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BACKGROUND OF THE INVENTION 



Field of the Invention 

20 

The present invention relates generally to the field of certifications and 
accreditation (C&A) and, more particularly, to a computer-implemented 
system, method and medium for C&A that automates target system 
configuration discovery and formats the network or other target system 
25 configuration data obtained for use with a C&A system that can utilize the 

data to assess the risk of and/or determine the suitability of the network or 
target system to comply with at least one predefined standard, regulation 
and/or requirement. 
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The general purpose of C&A is to certify that automated information 
systems adequately protect information in accordance with data sensitivity 
and/or classification levels. In accordance with Department of Defense (DoD) 
Instruction 5200.40, dated December 30, 1997, entitled DoD Information 
Technology Security Certification and Accreditation Process (DITSCAP), 
which is incorporated herein by reference in its entirety, certification can be 
defined as the comprehensive evaluation of the technical and non-technical 
features of an information technology (IT) system and other safeguards, made 
in support of the accreditation process, to establish the extent that a particular 
design and implementation meets a set of specified security requirements. 
Similarly, as used herein, accreditation can be defined as a formal declaration 
by a designated approving authority that an IT system is approved to operate 
in a particular security mode using a prescribed set of safeguards at an 
acceptable level of risk. In general, DISTSCAP is utilized by the DoD for 
identifying and documenting threats and vulnerabilities that pose risk to 
critical information systems. DITSCAP compliance generally means that 
security risk posture is considered acceptable and that potential liability for 
system "owners" is mitigated. 

The C&A process typically involves a number of policies, regulations, 
guidelines, best practices, etc. that serve as C&A criteria. Conventionally, the 
C&A process is typically a labor intensive exercise that can require multiple 
skill sets over a period of time typically spanning 6-12 months. In particular, 
collecting data pertaining to a network configuration undergoing C&A is done 
manually by, for example, entering a system hardware configuration, operating 
system and/or application software package(s) associated with each node (e.g., 
IP address) on a network undergoing C&A; Several organizations and/or 
individuals may also be involved in the processes of selecting applicable 
standards, regulations and/or test procedures, and assembling test results and 
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other information into a DITSCAP compliant package. There is therefore a 
need to substantially automate the network configuration data collection 
process, and format the data so that it can be used with, for example, a C&A 
system that substantially automates the process of performing security risk 
assessments, certification test procedure development, system configuration 
guidance, and residual risk acceptance. 



The present invention provides a system, method and medium that 
substantially automates network configuration discovery and formats the 
network configuration data for use with an automated C&A system, where the 
C&A system assesses the risk of and/or determines the suitability of a target 
system (e.g., one or more devices) to comply with at least one predefined 
standard, regulation and/or requirement. 

In an exemplary embodiment, the data collection process is automated 
and formatted in a manner that facilitates use with DoD's DITSCAP 
requirements. The present invention is not, however, limited to a DoD 
environment, and may also be used in non-DoD government as well as 
civilian/private sector organizations requiring risk management and guidance. 
For example, the system and method according to the present invention can 
also be used to automate the National Information Assurance Certification and 
Accreditation Process (NIACAP). 

An exemplary embodiment according to the present invention 
contemplates a system, method and medium that automates the network 
configuration information gathering process, and maps the configuration to, 
for example, a database table format that can be used by a C&A system such 
as that originally disclosed in application Serial No. 09/794,386. An 
exemplary embodiment according to the present invention also contemplates a 
browser based solution that automates the DITSCAP process. The browser is 
preferably directed to five primary elements: 1) gathering information, 2) 
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analyzing requirements, 3) testing requirements, 4) performing risk 
assessment, and 5) generating certification documentation based on an 
assessment of the first four elements. 

The information gathered primarily relates to a description of the 
system to be certified, and its respective components and operating 
environment (e.g., workstation manufacturer and model and/or other hardware 
characteristics/parameters, operating system and version, secret, or top secret 
operating environment, etc.). The requirements analysis generally involves 
selecting by the system, or optionally by the user, a list of standards and/or 
regulations that the system must or should comply with. Once system/network 
information is gathered and the requirements analysis is provided, the system 
can intelligently select a set of test procedures against which the system is 
tested. Upon completion of testing, the risk assessment provides as output an 
estimate of the risk level for each individual test failed. Each of the failed 
tests are also collectively considered and used to evaluate the risk level of the 
network undergoing C&A (i.e., target system). Then, documentation can be 
printed that includes information pertaining to the first four elements that 
would enable an accreditation decision to be made based on the inputs and 
outputs respectively provided and generated in the first four elements. 

Before explaining at least one embodiment of the invention in detail, it 
is to be understood that the invention is not limited in its application to the 
details of construction and to the arrangements of the components set forth in 
the following description or illustrated in the drawings. The invention is 
capable of other embodiments and of being practiced and carried out in 
various ways. 
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The Detailed Description including the description of a preferred 
structure as embodying features of the invention will be best understood when 
read in reference to the accompanying figures wherein: 

FIG. 1 is an exemplary high level flowchart of a method contemplated 
by at least some embodiments of the present invention; 

FIG. 2 is an exemplary introductory screen shot corresponding to the 
flow chart provided in FIG. 1; 

FIG. 3 is an exemplary user login screen shot; 

FIG. 4 is an exemplary project definition screen shot; 

FIG. 5 is an exemplary project definition screen shot showing user 
selection of either civilian or Department of Defense applicability; 

FIG. 6 is an exemplary block diagram of a certification and 
accreditation (C&A) system assessment aspect and an associated network 
and/or target system contemplated by at least some embodiments of the 
present invention; 

FIG. 7 is an exemplary block diagram of a target system discovery 
engine contemplated by at least some embodiments of the present invention; 

FIG. 8 is an exemplary embodiment of a target system configuration 
file format; 

FIG. 9 is an exemplary illustration of the target system scanning and 
profiling relationships; 

FIG. 10 is an exemplary project hardware screen shot; 

FIG. 1 1 is an exemplary flow chart of the requirements analysis 
process as contemplated by at least some embodiments of the present 
invention; 

FIG. 12 is an exemplary screen shot used to generate a security 
requirements traceability matrix (SRTM); 

FIG. 13 is an exemplary screen shot showing a display of a SRTM; 
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FIG. 14 is an exemplary flow chart illustrating the testing process as 
contemplated by at least some embodiments of the present invention; 

FIG. 15 is an exemplary screen shot showing how test plan 
information can be edited; 
5 FIG. 16 is an exemplary screen shot illustrating how a user can select 

an existing test procedure and/or create a new test procedure and associate the 
test procedure(s) with one or more requirements; 

FIG. 17 is an exemplary flow diagram of a method for generating 
equipment tests contemplated by at least some embodiments of the present 
10 invention; 

FIG. 18 is an exemplary screen shot showing how a user can add a test 
procedure; 

FIG. 19 is an exemplary screen shot showing how a user can edit a test 
procedure; 

15 FIGs. 20A and 20B are exemplary screen shots that enable a user to 

enter test results; 

FIG. 21 is an exemplary high level flow diagram of the risk assessment 
method according to at least some embodiments contemplated by the present 
invention; 

20 FIG. 22 is a table showing three different levels of illustrative threat 

categories; 

FIG. 23 is an exemplary screen shot showing a portion of the 
illustrative threat categories of FIG. 22; 

FIG. 24 is an exemplary scheme by which the risk of an individual test 
25 failure is assessed in accordance with at least some embodiments 

contemplated by the present invention; 

FIG. 25 is an exemplary flow diagram of a method of assessing overall 
system risk in accordance with at least some embodiments contemplated by 
the present invention; 
30 FIG. 26 is an exemplary flow diagram of the publishing process in 
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accordance with at least some embodiments contemplated by the present 
invention; 

FIG. 27 is an exemplary screen shot showing how a user can select a 
portion of a document for publishing; 

FIG. 28 is an exemplary screen shot that enables a user to edit and/or 
view a portion of a document prior to publishing; 

FIG. 29 is an exemplary screen shot showing how a user can select a 
portion of a document for publishing; 

FIG. 30 is an exemplary screen shot illustrating how a user can publish 
a portion of a document; 

FIG. 31 illustrates one example of a central processing unit for 
implementing a computer process in accordance with a computer implemented 
stand-alone embodiment of the present invention; 

FIG. 32 illustrates one example of a block diagram of internal 
hardware of the central processing unit of FIG. 31; 

FIG. 33 is an illustrative computer-readable medium upon which 
computer instructions can be embodied; and 

FIG. 34 is an exemplary entity relationship diagram that describes the 
attributes of entities and the relationship among them. 



Referring now to the drawings, and more particularly to FIG. 1 , a high 
level flow diagram is shown that provides an overview of the method 
according to the present invention. In the first step, information is gathered 
pertaining to the system or network undergoing C&A. This is indicated by a 
block 100. The information gathered typically relates to a description of the 
system to be certified, and its respective components and operating 
environment (e.g., workstation manufacturer and model, operating system and 
version, secret, or top secret operating environment, etc.). As will be 
described in further detail herein, at least some embodiments of the present 
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invention advantageously automate collection of certain information 
pertaining to the network undergoing C&A. Alternatively, the information 
pertaining to the network undergoing C&A can be manually entered. 

As indicated above, aspects of at least some embodiments of the 
present invention are described in accordance with DoD's DITSCAP 
requirements. However, it should be understood that such description is only 
by way of example, and that the present invention contemplates use with 
regard to any number of types of requirements or environments. In addition, 
within its use with regard to DITSCAP requirements, it should be understood 
that many of the various aspects and selection options are also exemplary, as 
is the fact that information is shown as being entered via a web browser. 

The requirements analysis generally involves selecting (by a human 
and/or some automated procedure) a list of standards and/or regulations that 
the system must, or should, comply with. This is indicated by a block 102. 
Optionally, selection of additional standards/regulations and/or requirements 
by a user is also contemplated. At least some embodiments of the present 
invention then contemplate automatically displaying/listing each requirement 
that comprises the current security requirements traceability matrix (SRTM), 
which is derived from the selected set of standards and/or regulations that the 
system must comply with. Additionally, the user will be able to customize the 
current SRTM by either adding, editing and/or deleting requirements. As 
known to those skilled in the art, a SRTM can be a table used to trace project 
lifecycle activities (e.g., testing requirements) and/or work products to the 
project requirements. The SRTM can be used to establish a thread that traces, 
for example, testing and/or compliance requirements from identification 
through implementation. A SRTM can thus be used to ensure that project 
objectives and/or requirements are satisfied and/or completed. 

Once information is gathered 100 and the requirements analysis 102 is 
provided, the system intelligently selects a set of test procedures against which 
the system is tested, as indicated by block 104. The test procedures are 
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selected in a manner so that successful completion of the test procedures will 
render the system undergoing C&A to satisfy the SRTM requirements. 

Upon completion of testing 104, the risk assessment step (as indicated 
by a block 106) then involves assessing for each test failure (should any exist) 
5 the vulnerability of the system, as well as the level of the threat as determined 

by the information gathered. The risk assessment 106 provides as output an 
estimate of the risk level for each individual test failed. Each of the failed 
tests are also collectively considered and used to evaluate the risk level of the 
system as a whole. Then, documentation can be optionally printed 108 that 

10 includes information pertaining to the first four elements that would enable an 
accreditation decision to be made based on the inputs and outputs respectively 
provided and generated in the first four blocks (i.e., 100, 102, 104, 106). Each 
block shown in FIG. 1 (i.e., 100, 102, 104, 106 and 108) will be discussed in 
further detail herein. FIG. 2 is an exemplary screen shot corresponding to the 

15 blocks (100, 102, 104, 106, 108) provided in FIG. 1. Further information 

pertaining to the system and method according to the present invention can be 
found in the following document: WEB C&A , dated JftOl, available from 
Xacta Corporation, Ashburn, VA. A copy of this document is incorporated 
herein by reference in its entirety. 

20 FIG. 3 shows an exemplary access control screen shot (e.g., for access 

to some or all aspects of the present invention as indicated above). Each user 
can optionally be required to input a valid user name and password, which 
provides them with access to only the information for which they are 
responsible. The system can also optionally exclude the password and access 

25 feature, providing users access to a set of predetermined and/or default 

information. 
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Information Gathering 



FIGs. 4-5 show selected exemplary screen shots of aspects of the 
information gathering 100 process. Specifically, FIG. 4 shows project 
definition information, which is assumed to have been selected by tab 402. 
Fields such as project name 430, project version 432, project acronym 
434, project description 436, department 438, and service 440 can be 
provided as being part of the project definition. The project name 430 field 
is preferably a read-only field, provided for information only. The project 
version field 432 enables the numeric version of the system undergoing C&A 
to be entered, if applicable. The project acronym field 434 is optionally used 
to provide an acronym for the project. The project description field 436 can 
be used to provide a detailed description of the project (e.g., mission 
statement, function, features, and/or capabilities of the system being 
accredited). The department field 438 can be used to identify the 
Government (or civilian) department under which this system is being 
accredited. As shown, the current choice is DoD. The service field 440 is 
used to identify the Service/Agency under which this system is being 
accredited. As shown, the current choices are Army, Navy, Marine Corps, Air 
Force, OSD, and Other. Each of the above-identified fields can be tailored to 
suit a particular need and/or application. 

FIG. 5 shows how a user can select, via a conventional pulldown 
menu, either civilian or DoD service from field 438. As disclosed in 
Application Serial No. 09/794,386, other menus can be provided that, for 
example, enable a user to select a military service branch (e.g., Army, Air 
Force, Marine Corps, OSD, or other), and to input Information Technology 
Security (ITSEC) parameters (that can pertain to, for example, interfacing 
mode, processing mode, attribution mode, mission-reliance factor, 
accessibility factor, accuracy factor, information categories, system class level, 
and certification analysis level, as explained in DoD Instruction 5200.40) of 
the system being accredited. In addition, as disclosed in Application Serial 
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No. 09/794,386, menus can also be provided that allow a user to, for example, 
select a security level (e.g., secret, unclassified, sensitive, etc.) and related 
information, and/or provide context sensitive help. 

FIG. 6, shows a high level system diagram that provides an overview 
5 of the target system assessment aspect 600 (hereinafter system 600) and an 
associated network or target system 612 according to at least some 
embodiments of the present invention. As used herein, a network can be 
defined as two or more objects that are directly or indirectly interconnected. 
Referring now to FIG. 6, a network interface 608 provides an interface to one 
10 or more networks 612 having one or more network devices 614a-n operatively 
connected thereto. The network interface 608 can be a conventional RJ-1 1 or 
other similar connection to a personal computer or other computer that 
facilitates electronic interchange with the network 612. 



1 5 Network Discovery Engine 

As shown in FIG. 7, at least some embodiments of the present 
invention contemplate that the network discovery engine 606 comprises three 
separate modules: a network scanner 702, a host profiler 704, and a profile 
integrator 706. As will be discussed in further detail herein, the network 

20 discovery engine 606, via the network interface, collects information such as 
IP Address, hostname, media access control (MAC) address, operating system 
(OS), and OS version for one or more network devices (e.g., 614a-n). 



Network Scanner 

25 The network scanner 702 scans a network segment 614 (comprised of 

network devices 614a-n) and reports the results to a network scan file 708 
(e.g., a text file). Network devices 614a-n can be any devices that, for 
example, have an Internet Protocol (IP) address associated therewith (or that 
have some other mechanism by which the devices/components can be 

30 identified). The network scanner 702 can scan through a specified range of IP 
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addresses associated with each respective network device 614a-e within the 
network segment 614. 

The network discovery engine 606 can utilize conventional network 
topology discovery techniques such as transmission control protocol 
5 (TCP)/user datagram protocol (UDP) port interrogation, and/or simple 

network management protocol (SNMP) queries, and receive network 
configuration information provided by such technique(s). Network topology 
information can optionally be manually added via the user interface 602. 
Upon entering or providing one or more IP address (e.g., a range of IP 

10 addresses), the host name of a network device 614a-n can be obtained by 

using, for example, a getHostName (or similarly named) function that will 
query a network device 614a-n for a host name. Functionally, the 
getHostName function can scan one or more domain naming service (DNS) 
servers internally and optionally over, for example, the World Wide Web to 

15 try and resolve the IP address (i.e., match the IP address with its respective 

host name). In the case of a MAC address, the initial sweep of, for example, a 
network segment 614 can have one or more Internet Control Message Protocol 
(ICMP) requests. One such request can be a "ping request." The packet 
returned from such a ping request can include, for example, the MAC address 

20 of the host device. Similarly, during a port sweep/interrogation, the OS family 

(e.g., Unix, Windows, etc.) and version can generally be determined. 
Regarding SNMP queries, if a queried network device 614a-n is SNMP 
enabled, additional information (e.g., device manufacturer, model, application 
software), etc. can generally be obtained. Finally, if a network device 614a-n 

25 utilizes (e.g., has installed thereon) an Enterprise Management (EM) 

software/system, the system 600 can scan the EM database (or an extract or 
portion thereof) associated with a particular network device 614a-n to obtain 
additional detailed information on each network device 614a-n in the IP range. 
The network scanner 702 can obtain the following information relating 

30 to network devices 614a-e (which correspond to the network segment 614 
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under consideration): IP Address, hostname, media access control (MAC) 
address, operating system (OS), and OS version. This information can be 
written to a network scan text file 708. The MAC address, as used herein is a 
hardware address that uniquely identifies each node of a network. In IEEE 
5 802 networks, for example, the Data Link Control (DLC) layer of the Open 

System Interconnection (OSI) Reference Model is divided into two sublayers: 
the Logical Link Control (LLC) layer and the Media Access Control (MAC) 
layer. The MAC layer interfaces directly with the network media. 
Consequently, each different type of network media requires a different MAC 
10 layer. On networks that do not conform to the IEEE 802 standards but do 

conform to the OSI Reference Model, the node address is called the Data Link 
Control (DLC) address. 



Host Profiler 

15 The host profiler 704 can produce a host profile file 710 (e.g., a text 

file) containing information such as hardware configuration, operating system 
and patch levels, installed software list, etc. Host profilers 704 can optionally 
be provided to accommodate different classes of hosts (e.g., Windows-based 
machines, UNK-based machines, etc.). The host profile can be conventional 

20 enterprise management software developed by Tivoli Systems Inc., Austin 
Texas, or by Computer Associates International, Inc., Islandia, New York. 

Using conventional system commands, operating system application 
program interface (API) calls, registry calls, etc., the host profiler 704 can 
determine information about the hardware configuration, operating system 

25 options, installed software, etc. of each network device 614a-e within a 

particular network segment 614. This information for each host 614a-e can be 
recorded in the host profile file 710. The data in the host profile file 710 can 
then be used to supplement the information about the respective host in the 
network scan file 708. A host profile text file 710 can contain information 

30 about more than one host. 
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Profile Integrator 
The profile integrator 706 enables information from host profile file 
710 to be added to an existing network scan file 708. The profile integrator 
5 706 takes the data in one or more host profile text files 710 and integrates the 

data into an existing network scan text file 708. 

Network Scan File 
The network scan file 708 can utilize the conventional Microsoft .INI 

10 type file format. As will be appreciated by those skilled in the art, an .INI file 
is a file that contains startup information required to launch a program or 
operating system. In general, the network scan file 708, which can be an 
ASCII file, can identify particular network devices 614a-e by using the form 
<parameter>=<value>, where <parameter> is the name of the particular 

15 item of information, and <value> is the value of that item of information for 

the network device 614a-e under consideration. For example, as shown in 
FIG. 8 at 808a, the IP Address = 192.168.0.10 indicates the identified host 
responded at the specified IP address. 

As further shown in FIG. 8, the network scan file 708 can begin with a 

20 [Network] section 802 that describes the overall network being scanned. The 

network (e.g., network 612) name is Xacta, as indicated at 802a. Each 
network segment (e.g., 614) can be described by a [Segment] section 806. 
The network segment is called Office, as indicated at 807. At 806a, the 
network name Xacta is again provided. The Office segment has IP addresses 

25 in the 192.168.0.0-255 subnet, as indicated at 806b. The subnet was scanned 

twice: once on 12-01-2000, and once on 12-15-2000, as indicated at 806c and 
806d, respectively. 

A [Host] section 808, 810 can also be provided for each network 
device (e.g., 614a-e) within the network segment 614. The IPAddress 808a, 

30 MAC 808b, Hostname 808c, OS 808d, and Version 808e are the basic 
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information collected by the network scanner 702. At 810, the information 
collected by the host profiler 704, which has been integrated into the network 
scan file 708 by the profile integrator 706, includes: IPAddress 810a, MAC 
810b, Hostname 810c, OS 81 Od, and Version 810e, mfr 810f, model 810g, 
5 CPU 810h, CPU Qty 810i, CPU Speed 810j, RAM 810k, Disk Space 8101, 
and Software 810m-p. The host profile file 710 can use the same file format 
(e.g., .INI) as the network scan file 708. The profile integrator 706 can 
integrate one or more host profile files 710 with a network can file 708. Each 
[Host] sections (e.g., 810) can either have their own separate host profile files 
10 710. Alternatively, two or more host sections 810 can be included in a host 

profile file. 

FIG. 9 illustrates an exemplary schema 900 that can be used in 
conjunction with network discovery. As shown, the schema 900 comprises: 
platform categories 902 (comprising categories 902a-n), network 612 

15 (comprising network devices 614a-n), and software inventory 906 (comprising 

application software programs/packages 906a-n). 

Platform category elements 902a-n represent generic categories of 
equipment that lie within the accreditation boundary (e.g., network segment 
614) that includes the components (e.g., network devices 614a-e) that are 

20 associated with the network segment 614 being accredited. Representative 

platform categories can include desktop computer, laptop computer, 
mainframe computer, handheld device, hub, etc.. Platform categories 
generally represent typical configuration(s) of the network devices 614a-n that 
belong to a particular platform category. As used herein, an accreditation 

25 boundary can be defined as the network devices (e.g., 614a-e) that comprise 

the network segment 614 (or target system) being accredited. There can also 
be one or more devices that are associated with the network segment 614 
being accredited, but that are outside of the accreditation boundary and thus 
not included in the accreditation. Equipment outside the accreditation 

30 boundary can include equipment/services as a domain naming service (DNS) 
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used to translate the host names to IP addresses. 

With regard to platform category elements 902a-n, the typical office 
LAN might consist of the following platform categories: file server, mail 
server, network printer, router, switch, and workstation. Information about 
5 each platform category 902a-n can include hardware specifications (e.g., 

manufacturer, model, CPU, memory, etc.) and OS specifications (e.g., OS 
name, version, patches, etc.). Since the platform categories 902a-n are 
generic, and numerous actual network devices 614a-n generally exist, the 
hardware and OS specifications of a platform category 902a-n will represent 

10 the typical configuration expected of network devices that belong to a 

particular platform category (e.g., network devices 614a, 614b, 614c and 614i 
belong to equipment category 902b). 

Network devices 614a-n represent actual pieces of equipment within 
the accreditation boundary. Each network device 614a-n belongs to one of the 

15 exemplary platform categories 902a-n, as discussed above. Upon assignment 

to a platform category 902a-n, each network device 614a-n can "inherit" (or is 
assumed to have) the generic information (e.g., hardware and OS specs) of its 
assigned category. A user, via user interface 602, can then optionally add, 
delete and/or edit information. Network devices 614a-n are assigned to a 

20 platform category (e.g., 902a) to facilitate test procedure generation, as will be 
discussed in further detail herein, particularly with regard to FIG. 17. 

Software inventory elements 906a-n represent application programs 
(i.e., operating systems are not included). The system 600 can form an 
association between one or more software elements 906a-n and one or more 

25 platform category element 614a-n (e.g., an association is formed between 

software elements 906a, 906b, 906c and platform category 902a). When such 
an association is formed, the software is considered to be installed on all 
equipment in that platform category 902a-n. Similarly, the system 600 can 
form associations between a software element 906a-n and a network device 

30 614a-n. Such an association indicates that the software is actually installed on 
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10 



15 



20 



25 



the associated network device 614a-n, but that the software element is not 
necessarily installed on every network device in a given platform category 



Network configuration information can also be manually entered into 
the system 600. For example, returning to FIG. 4, when project hardware tab 
414 is activated, a menu as shown in FIG. 10 can be provided. The menu 
allows a user to, for example, Edit/Delete H/W 472, enter various Platform 
Information 474, CPU information 476, and/or Memory/Storage 
Information 478. This information can be modified to reflect changes in 
system configurations throughout the information gathering requirements 
analysis and testing phases. 

Database Tables 
At least some embodiments according to the present invention 
contemplate a database structure with at least the following tables that can be 
utilized to accommodate the network scanning and profiling features. The 
exemplary data dictionary disclosed herein provides additional details 
pertaining to the following tables. 

• WCA_ProjPlatCat Table - contains a row for each defined platform 
category. 

• WCA_ProjEquipInven Table - contains a row for each piece of 
equipment. 

• WCA_ProjSWInven Table - contains a row for each defined software 
element. 

• WCA_ProjPlatSW Table - contains a row for each defined association 
between a software inventory element and a platform category (for each 
project); each such association indicates that the software element is 
typically installed on members of the associated platform category. 

• WCA_ProjEquipSW Table - contains a row for each defined association 
between a software inventory element and an equipment inventory element 



902a-n. 
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(for each project); each such association indicates that the software 
element is actually installed on that particular piece of equipment. 
» WCA_OSSource Table - contains a row for each 'standard' operating 
system, including family (NT, UNIX, or Other), manufacturer, name, 
version, etc. 

» WCA_SWSource Table - contains a row for each 'standard' software 
application, including family (e.g. database, network OS, etc.), 
manufacturer, name, version, etc. 



Certification and Accreditation Engine 
As will be explained in further detail herein, once information has 
been collected (either manually or via an automated process, each as described 
above) pertaining to devices 614a-e belonging to the network segment 614, 
the certification and accreditation engine 614, can select compliance 
requirements/standards and test procedures applicable to the C&A under 
consideration. A user can also select requirements/standards and/or test 
procedures by using, for example, user interface 602. 



Additional Information Gathering 

Returning again to FIG. 4, when project personnel tab 408 is activated, 
a menu (not shown) can be provided that enables a user to enter information 
identifying all the project personnel associated with the accreditation effort. 
The personnel are preferably identified by the role, as discussed below, that 
they serve in the accreditation process. At least one entry for each role is 
preferably defined for the project. 

For example, the following fields can be provided in a menu (not 
shown) subsequent to clicking the personnel tab 408: 

• Role Name - The role associated with the accreditation team 
member. The available choices can be: 
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Accreditation Team Lead - The person in charge of the 
accreditation effort, usually the Project Manager. 

Accreditation Team Member - All the members of the 
accreditation team (analysts, testers, etc.). 
5 Certification Authority (CA) - Person in charge of the system 

certification. 

Certification Authority POC - Point of Contact (POC) to the CA. 

DAA - Designated Approving Authority. Person ultimately 
responsible for the accreditation of the system. 
10 DAA POC - Point of Contact (POC) to the DAA. 

ISSO - Information System Security Officer. Person responsible 
for the security implementation of the system being accredited. 



• Organization Responsible - Organization responsible for the design 
15 and development of the system being accredited. 

• Organization Responsible POC - Point of Contact to the 
Organization responsible. 

• Program Manager - Program manager of the system being 
accredited. 

20 • User Representative - Representative from the user community. 

• Title - The title associated with the accreditation team member (Mr., 
Ms. or Dr., etc.) 

• First Name - The first, middle initial, and last name of the 
accreditation team member. 

25 • Office - The office (e.g., Office of the Assistant Deputy for Policy 

and Planning) of the accreditation team member. 

• Office Designation - The office designation of the accreditation 
team member. For example, if the office is the Office of the Assistant Deputy 
for Policy and Planning, then the office designation may be ADS-P. 

30 • Organization - An organization that is associated with the 
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accreditation team member. 

• Work Address - A work address if applicable for the accreditation 
team member (include city, state and zip code). 

• Work Phone - A work phone number for the accreditation team 
member. 

• Work Fax - A work fax number if applicable for the accreditation 
team member. 

• Email Address - An email address if applicable for the accreditation 
team member. 

When the project schedule tab 412 of FIG. 4 is activated, a screen can 
appear (not shown) that provides the capability to describe and store each 
project milestones for the system being accredited. Fields such as milestone 
title, milestone date, and milestone description can be provided. 

When project hardware tab 414 is activated, a menu as shown in FIG. 
10 can be provided. The menu allows a user to, for example, Edit/Delete 
H/W 472, enter various Platform Information 474, CPU information 476, 
and/or Memory/Storage Information 478. This information can be modified 
to reflect changes in system configurations throughout the information 
gathering requirements analysis and testing phases. 

When project operating system 416 is activated, a menu (not shown) 
that enables a user to manually, in addition to or in lieu of the automated 
process heretofore, describe and store operating systems associated with the 
system hardware is provided. The ability to enter information pertaining to 
multiple operating systems (OS) on each hardware platform can be provided. 
Fields are provided to enable a user to enter information pertaining to the OS 
Name (e.g., Windows NT, AIX, HP UX, etc.), OS Type (e.g., NT, UNIX, 
etc.), OS Manufacturer (e.g., Microsoft, Hewlett Packard, IBM, etc.), OS 
Version (the numeric value of the operating system version), OS Options (a 
list of all OS options (if any) obtained for this platform), OS Patches (a list of 
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OS patches (if any) that have been installed on the platform), OS Description 
(a detailed description of the operating system, possibly including the basic 
features, and any functions unique to the system being accredited). 

When project application tab 418 is activated, a project application 
screen appears (not shown) that can provide the analyst with the ability to 
manually, in addition to or in lieu of the automated process described 
heretofore, describe and store applications associated with the system 
hardware/OS combinations. The following exemplary fields can be provided: 
Application Name (the name of the application), Application Type (the type of 
application on the system being accredited - e.g., database, office automation, 
e-mail server, etc.), Application Manufacturer (the name of the application 
manufacturer), Application Version (the numeric version of the application), 
Application Options (a list of the options associated with the application (if 
any)), Application Patches (a list of the patches associated with the 
application), and Application Description (a detailed description of the 
application). 

When system interfaces tab 420 is activated, a menu (not shown) is 
provided that provides the user the ability to describe and store the flow of 
information into and out of the accredited system. The system interfaces 
entries can describe each of the internal and external interfaces identified for 
the system. The following exemplary fields can be provided: Interface Name 
(an internal or external name associated with the system interface), and 
Interface Description (a detailed description of the internal or external system 
interface, which preferably includes a statement of the significant features of 
the interface as it applies to the entire system, as well as a high level diagram 
of the communications links and encryption techniques connecting the 
components of the information system, associated data communications, and 
networks). 

When system data flow tab 422 is activated, a menu (not shown) is 
provided that can provide the user the ability to describe and store the flow of 
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information within the accredited system. System data flow entries can 
describe the flow of information to each of the external interfaces identified 
for the system. The following exemplary fields can be provided: Data Flow 
Short Name (a brief user-defined name associated with the system data flow), 
and Data Flow Description (a detailed description of the data flow associated 
with the external interface, which preferably includes a statement of the 
purpose of the external interface and the relationship between the interface and 
the system, as well as the type of data and the general method for data 
transmission, if applicable). 

When accreditation boundary tab 424 is activated, a menu (not shown) 
that provides the user with the ability to describe and store the identification of 
components that are associated with the system being accredited, but are 
outside of the accreditation boundary (i.e., not included in the accreditation). 
This category might include such equipment/services as, for example, a 
domain naming service (DNS) used to translate the host names to IP 
addresses. The DNS might not be part of the atomic system being accredited, 
but is required for most communication activities. The following exemplary 
fields can be provided: Accreditation Boundary Name (a name associated 
with the external system component), and Accreditation Boundary Description 
(a detailed description of the external system component, which preferably 
includes the function that this component/service provides the system being 
accredited and its relationship to the system). 

When project threat tab 426 is activated, a menu (not shown) appears 
that provides the user the ability to quantify the threat environment where the 
system is intended to operate. If the system is targeted to operate in multiple 
locations, the environmental condition that results in the higher or highest 
level of risk can be selected. The following exemplary fields can be 
provided: Location (CONUS (CONtinental US) or OCONUS (Outside 
CONtinenal US) as the primary operating location for the system), System 
Communications (the primary means of information transfer to external 
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systems, such as No LAN, Local LAN Only, SIPRNET (SECRET Internet 
Protocol Router Network), NIPRNET (Unclassified but Sensitive Internet 
Protocol Router Network), Internet, etc.), Connection (the types of connection 
- e.g., wireless, dial-up, or protected distribution system (PDS), etc.), Training 
5 Competency Level (e.g., administrator, maintenance personnel, user, etc.), 

Installation Facility (the operating environment of the system at its intended 
end site), Natural Disaster Susceptibility (e.g., fire, flood, lightning, volcano, 
earthquake, tornado, etc.), and Custom Components. 

When project appendices tab 428 is activated, a menu (not shown) that 

10 provides the user the ability to identify external documents that are associated 
with the C&A is provided. These appendices can optionally include 
references to other documents, or consist of the contents of other documents 
that are accessible via a computer-implemented embodiment of the present 
invention. Representative appendices that may be derived are: System 

15 Concept of Operations, Information Security Policy, System Rules of 

Behavior, Incident Response Plan, Contingency Plans, Personnel/Technical 
Security Controls, Memoranda of Agreement, Security, Education, Training 
and Awareness Plan, and Certification and Accreditation Statement. 

Tabs 402-428 can be activated in any order, and do not need to be 

20 activated sequentially. Also, each tab can be optionally customized to contain 
different, fewer, or additional fields relative to the fields discussed above. 
Further, the tabs (402 - 428) can be arranged differently. Fewer or additional 
tabs can also be provided to suit a particular application or need. 



25 Requirements Analysis 

The system configuration captured in the step of block 100 of Fig. 1 is 
used as input for the determination of the requirements indicated by block 
102. The process of editing and/or determining/selecting those requirements 
is shown in FIG. 11. In at least some embodiments contemplated by the 

30 present invention, the Requirements Analysis step is related to the 
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Accreditation Type 404 and Project Security 406 information stored in the 
step indicated by block 100. In at least some embodiments, data is entered 
and saved in the Accreditation Type 404 and Project Security 406 fields 
provided before beginning the Requirements Analysis step indicated by block 



In an exemplary embodiment, a general purpose computer on which 
the present invention operates will have stored thereon or have access to a 
repository of security regulations and test procedures from various government 
and/or civilian departments, agencies, organizations, etc (e.g., such as those 
from DITSCAP). In step 1 102 (FIG. 11a), and based at least in part on the 
information entered in step 100, pertinent regulations will be selected from 
this repository, upon which to build a security requirement traceability matrix 
(SRTM) for the C&A. The SRTM, as discussed above, can be a mapping of 
one or more test procedures to each individual requirement within a 
requirements document. Satisfactory completion of the respective one or 
more test procedures that can be mapped to each requirement is generally 
considered to render the requirement satisfied. However, the user has the 
flexibility to view and modify 1 104 the SRTM as desired to meet the specific 
needs of the systems being accredited by, for example, adding and/or deleting 
one or more tests to/from the SRTM, and/or editing one or more of the test 
procedures to, for example, include additional testing requirements. If the 
user decides to modify a test procedure, the specified test procedure displayed 
1 106. The user can then modify and save the revised test procedure 1 108. 
The user can then either end the editing process or continue to modify another 
security document 1110. 

FIG. 12 shows an exemplary Generate Baseline SRTM screen shot. In 
at least some embodiments of the present invention, clicking the Requirements 
Analysis tab 1201 from the application menu will switch control to the 
Generate Baseline SRTM screen. As shown, FIG. 12 provides a menu that 
provides a list of pre-packaged (i.e., shipped with the application) regulations 
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documents (1202 - 1222) for the user to select. Each regulations document 
(1202 - 1222) contains specific requirements, one or more of which may be 
utilized when performing the C&A. All unmarked check boxes (e.g., check 
boxes associated with documents 1202, 1206, 1210, 1212, 1214, 1216, and 
1218) represent unselected Regulations Documents, and thus do not factor 
into the requirements analysis step 102 for the particular project under 
consideration. 

After selections have been made, either by the user by, for example, 
clicking the appropriate boxes associated with documents (e.g., 1204, 1208, 
1220 and 1224), and/or by the system, the application will provide a Display 
SRTM screen as shown in FIG. 13. Additionally, FIG. 13 may display any 
optional user-defined requirements as determined at FIG. 12, 1226. FIG. 13 
particularly shows pertinent portions of DoD 5200.5, selected in FIG. 12 
(1208), that are applicable to the C&A at hand. 



With the security requirements traceability matrix in place (a portion 
of which is illustratively shown in FIG. 13), the user proceeds to the testing 
step 104. In at least some embodiments of the present invention, user 
interfaces will be provided, in accordance with the steps shown in FIG. 14, for 
the user to have the system 600 generate one or more test procedures, and/or 
add and/or edit test plan information 1402, associate all the requirements to 
test procedures 1404, add and/or edit test procedures 1406, enter test results 
1408, and/or publish test results 1410. Any of the above steps can optionally 
be repeated as needed, as indicated in decision step 1412. Each of these steps 
will be discussed in further detail herein. 

An Edit Test Plan Information screen, corresponding to step 1402, is 
shown in FIG. 15. The exemplary input fields on the screen are Expected 
Date of Test 1502, Planned Location of Procedure 1504, Test Resources 1506, 
Test Personnel 1508, and Remarks 1510. 



Testing 
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FIG. 16 is an Associate Requirements screen, corresponding to step 
1404, which illustrates how a user can manually select a test procedure to 
associate it with at least one requirement selected. As indicated in the 
descriptive text block 1602, a user can select a source requirements document 
1604. Upon clicking on the associate icon 1606, a list of test procedures (not 
shown) can be displayed. The user can then select one or more of the test 
procedures within the test procedure database (as discussed above) and 
associate it/them with the selected source document 1604. A user can also 
create a new security test and evaluation procedure (ST&E) 1608 or 
certification test and evaluation (CT&E) procedurel610, by clicking on the 
respective icon. After the user enters the respective CT&E and/or ST&E 
information into a form presented on a new menu (not shown), the user can 
save the procedure(s) and optionally associate the procedure(s) via the 
Associate icon, as described above. As discussed in Application Serial No. 
09/794,386, the process described in FIG. 16 can also be automated. 



The certification and accreditation (C&A) engine 604 can generate test 
procedures, corresponding to step 1406, in accordance with the method shown 
in FIG. 17. In an exemplary embodiment of the system 600, the C&A engine 
604 receives network configuration information from the network discovery 
engine 606 and compare the network configuration information with approved 
hardware and/or software standards, which can advantageously provide a 
substantially continuous and dynamic risk management process. 

The system 600 can select one or more tests associated with each 
standard, regulation, etc. selected as discussed with regard to FIG. 12. For 
each selected test 1702 and for each platform category 1704, the C&A engine 
604 can determine whether, there is a test strategy associated therewith 1706. 
For each given platform category 902a-n, test strategies can include, for 
example, test one network device 614a-n associated with the platform 
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category, test some network devices 614a-n associated with that category, or 
test all network devices 614a-n associated with the platform category. 

If there is not a test strategy associated with the platform category 
902a-n currently under consideration, the process terminates 1718 without 
generating an instance of the test 1702 currently under consideration. If there 
is a test strategy associated with the platform category 902a-n currently under 
consideration, then a determination is made 1708 as to whether there are any 
network devices 614a-n associated with the platform category 902a-n selected 
at block 1704. If there are no network devices 614a-n associated with the 
platform category selected at block 1704, then one test procedure can be 
generated 1710 for the test category. The test procedure generated can be a 
generic test procedure that would cover all or substantially all of any network 
devices 614a-n that may be added to the platform category in the future. If 
there is at least one network device 614a-n associated with the platform 
category selected at block 1704, a determination is made as to whether the 
network device is to be tested 1712. If no, the process ends 1718; if yes, a test 
procedure is generated for that equipment piece 1714. The test procedure that 
will be generated can depend upon the hardware configuration, operating 
system, and application programs for the particular network device 614a-n, as 
determined by business rules and/or decision logic within the certification and 
accreditation engine 604. Finally, a determination is made as to whether there 
is additional equipment 1716. If no, the process ends 1718; if yes, the process 
returns to decision step 1712. 

FIG. 18 is a screen illustrating how a user can enter a new test 
procedure. As shown, the input fields on the screen are Test Title 1802, 
Category 1804, I, O, T, D (where I represents interview, O represents 
observation, T represents text, and D represents documentation review) 1806, 
Test Procedure 1808, and Expected Result 1810. If Associate 1812 is 
selected, then a new row is preferably created in the test procedure data base 
with the data entered in the input fields provided. 
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As previously discussed, the certification and accreditation engine 604 
contains decision logic whereby test procedures can be intelligently selected 
for the C&A at hand by using the system information specified in step 100 and 
the requirements analysis step 102. As discussed above in the context of the 
SRTM, one or more test procedures within the test procedure database can be 
mapped to, linked with, and/or otherwise associated with each of the 
individual requirements within each respective requirements document (FIG. 
12). As shown in FIG. 19, one or more of the test procedures intelligently 
selected by the present invention for the C&A at hand can be edited. In a 
preferred embodiment, the user will be able to edit any of fields 1802, 1804, 
1806, 1808 and/or 1810. As disclosed in Application Serial No. 09/794,386, 
the user can also edit the test procedure once it has been entered. 

FIG. 20A is a screen that enable a user to enter test results. As shown, 
at least some embodiment of the present invention contain the following 
exemplary columns: Category 2002, Test Title 2004, Operating System (OS) 
2006, Hardware 2008, Test Procedure 2010 (which enables a user to view the 
details of the test procedure), Associate Requirements 2012 (which allows the 
user to view which requirements a particular test procedure is associated 
with), Enter Results 2014, Complete 2016 (which provides an indication of 
whether the test procedure has been completed), and Result 2018 (which 
provides an indication of whether the test procedure has passed or failed). (It 
should be appreciated, however, that various embodiments of the present 
invention contemplate that the present invention automatically initiates the 
test, and obtains the results, without the need for any additional manual entry 
steps). 

FIG. 20B is an exemplary screen that appears when the Enter Results 
2014 icon is pressed that is associated with a particular test procedure. For 
example, in FIG. 20A, if icon 2014a is pressed, the a screen appearing similar 
in format to FIG. 20B will appear with the Test Title 1802 corresponding to 
the test contained in row 2002a of FIG. 20A (e.g., Cannot Log On Directly as 
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Root from Remote System/Terminal). As shown, the Test Title 1802, 
Category 1804, Equipment Under Test 1901, 1, O, T, D 1806, Test 
Procedure 1808 and/or Expected Result 1810 and fields also preferably 
appear within this screen. Also, Result field 2020 appears, which allows the 
5 user to enter the test result (e.g., pass or fail). Tester field 2022 enables the 

tester to provide his name, and Date 2024 that the test was conducted. 
Finally, the tester is able to enter any Notes pertaining to the test 2026. 



Risk Assessment 

10 Once the testing step 104 has been completed and the results recorded, 

the risk assessment step 106 commences, as indicated by sub- headings a-d 
below. 



a) Generate Project Threat Profile (step 2102) 
15 As shown in FIG. 21, at step 2102, at least some embodiments of the 

present invention generate a project threat profile, which is a score for each of 
the generic threat elements (e.g., fire, flood, hardware, power, software design 
error, etc.) as will be discussed in further detail herein. In at least some 
embodiments, the user performing the C&A is presented with a series of 
20 questions pertaining to the environment for which the C&A will be performed. 

(This information could also be obtained in an automated fashion using any 
number of known techniques). The present invention will then estimate the 
threat level based on the operators' answer. The value assigned to each of the 
generic threat elements is applicable to each test procedure associated with the 
25 particular system undergoing C&A. A user can optionally change any of the 

system determined threat element scores for one or more of the generic threat 
elements. Exemplary values for generic threat elements are as follows: 



Threat Element Score 


Interpretation 


N 


Threat element is not applicable to 
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this project or has negligible 
likelihood of occurrence 


L 


Threat element has low likelihood 
of occurrence for this project 


M 


Threat element has medium 
likelihood of occurrence for this 
project 


H 


Threat element has high likelihood 
of occurrence for this project 



For example, generic threat elements 1-29, as defined in FIG. 22, may 
have a project threat profile as follows: 

MHNLLLLMMMMMLLLMMMMLLLLLLLLNN 

corresponding, respectively, to elements 1-29. For this project threat 
profile, the threat of a flood is thus considered high. ^ . ...^^ 



Flh. 23 shows an exemplary Threat Environment screen, which shows 
the calcullted level of risk based on the information that was provided in step 
100. As p|r at least some embodiments, the present invention automatically 
calculates the risk, which is indicated under the Calculated Value 2302 
heading. r "his could be accomplished in any number of ways based upon data 
obtained curing the current and/or testing phase, as indicated above. The User 
Defined Value 2234 preferably defaults to the corresponding Calculated Value 
2302 for a given threat environment element (e.g., 1, 2, 3, etc.). However the 
user/analyst has the opportunity to optionally override the calculated risk 
rating by clicking on the User Defined Value 2204 for each corresponding 
threat gjgrhent. As previously discussed, exemplary available choices are 
negligib/eSow, medium, or high, although they could also be, e.g., numerical 
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b) Threat Correlation String (step 2104) 
In step 2104, a threat correlation for each failed test procedure is 
accessed. Specifically, each test procedure used in the C&A for the system 
5 being evaluated is, in at least some embodiments of the present invention, 

coded with a threat correlation string, with each character in the string 
representing one of the generic threat elements in the same order as they exist 
in the project threat profile as shown, for example, in FIG. 22. The test 
procedure database preferably contains these codes. Each character in the 
10 threat correlation string contains a score that indicates the relative potential of 

a given threat to exploit a vulnerability caused by failure of this particular test. 
An exemplary scoring system is as follows: 



Threat Correlation Score 


Interpretation 


N 


Threat element is not applicable to 
this vulnerability (or has negligible 
potential to exploit it) 


L 


Threat element has low potential 
for exploit of this vulnerability 


M 


Threat element has medium exploit 
potential for this vulnerability 


H 


Threat element has high exploit 
potential for this vulnerability 



15 Thus, for example, failure of a particular test may mean that the system 

being tested is highly vulnerable to Floods. To indicate this, the character in 
the thre t at correlation string corresponding to Floods would contain a score of 
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cj Determine Risk Profile for Each Failed Test Procedure (step 2106) 
As indicated at step 2106, the risk profile for each test procedure is 
determined. Specifically, for each test failure, the threat correlation string 
contained within each test procedure, as determined at step 2104, is applied 
5 against the project threat profile as determined at step 2102. 

For example, the project threat profile above, given as: 
MHNLLLLMMMMMLLLMMMMLLLLLLLLNN 

may have a test procedure with the following threat correlation sting: 
HHNMHLMNHHHMLNNNHLMLHNNLHHLMH 

10 In this case, in accordance with an exemplary process according to at 

least some embodiments of the present invention, the combined risk profile 
string as determined in accordance with FIG. 24 would be: 

MHNLMLLNMMMMLLLNMLMLMLLMMLNN 



15 For a given row of FIG. 24, and given the first two values contained in 

the first two columns corresponding to that row, we have discovered and 
determined that the values contained in the third column of the row can be 
used a measure or risk. 

The highest risk level in the combined string for a given test procedure 

20 is preferably used as the risk level for the failure of that test procedure. Thus, 
for the combined string above, the risk level for a failure of the test procedure 
is high, since there is an H in the second position. Similarly, if M were the 
highest risk level that appears in a combined string, then the risk level for a 
failure of that test procedure would be medium, etc. 

25 

d) Determine Overall System Level Risk (step 2108) 
In addition to the individual risk level scores for each test failure as 
determined in step 2106, an overall risk level for the project is also determined 
as indicated by step 2108. As shown in FIG. 25, in at least some 
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embodiments, of the present invention, the overall system risk level is defined 
as the highest of the individual risk elements. Thus, if it is determined that 
any element in the risk profile associated with the failure of any given test 
procedure is "high" (as indicated by decision block 2502), then the overall risk 
for the system is high as indicated by a block 2504. If the risk profile 
associated with the failure of any given test procedure is "medium" (as 
indicated by decision block 2506), then the overall risk for the system is 
medium as indicated by a block 2508 when no high risk test failures are 
present. If the risk profile associated with the failure of any given test 
procedure is "low " (as indicated by decision block 2510), then the overall risk 
for the system is low when no high risk or medium risk failures are present, as 
indicated by a block 2512. If the risk profile associated with the failure of any 
given test procedure is "negligible" then the overall risk for the system is 
negligible, as indicated by a block 2514, when no high risk, medium risk, or 
low risk failures are present. The user also can have the ability to override the 
overall system risk level as determined in accordance with the above 
methodology. In such a case, the user will also be able to optionally provide 
explanatory text to accompany the overall user-defined system risk level. 



In the publishing step 108, the present invention collates the results of 
the certification process and optionally generates the documents needed for 
accreditation. The present invention takes the information gathered during the 
steps corresponding to blocks 100, 102, 104 and 106, and reformats the 
information by, for example, organizing it into to appropriate documents, 
document subsections or subparagraphs, sections and/or appendices, etc. 

As shown in FIG. 26, the invention allows a user to select a document 
or subsection thereof for publishing 2602, and to optionally input and/or 
review the information thereof 2604. As shown in FIG. 27, to view the 
document subsection thereof, the user simply clicks on the section name 2702. 



Publishing 



5 m US1 34 W 



102632^1 US 1 34 W PATENT 

As shown in FIG. 28, the user can then edit the selection subsection 2702. 
The user can optionally edit, input information, or review the existing text 
2604 or add to it, or even upload graphics if desired to further customize the 
final document. If the user chooses to publish the document or subsection 
5 under consideration 2606, the publishing function 2808, as shown in FIG. 29, 

can also, as previously discussed, generate any Appendices desired by the user 
and/or required by, for example, the DITSCAP (DoD Instruction 5200.40). At 
decision step 2810, the process can either be repeated for another document or 
subsection, or terminated. Fig. 30 shows an exemplary screen shot that 

10 enables a user to publish 2902 the acronym list 2902 selected in FIG. 29. The 
present invention also contemplates that accreditation can be automated, so 
that no accreditation agency is needed. In this embodiment, when sufficient 
test related results and/or information is provided to the computer 3102, the 
method according to the present invention can automatically determine that 

15 accreditation requirements have been satisfied. 

Computer Implementation 
The techniques of the present invention may be implemented on a 
computing unit such as that depicted in FIG. 31. In this regard, FIG. 31 is an 

20 illustration of a computer system which is also capable of implementing some 

or all of the computer processing in accordance with computer implemented 
embodiments of the present invention. The procedures described herein are 
presented in terms of program procedures executed on, for example, a 
computer or network of computers. 

25 Viewed externally in FIG. 31, a computer system designated by 

reference numeral 3100 has a computer portion 3102 having disk drives 3104 
and 3106. Disk drive indications 3104 and 3106 are merely symbolic of a 
number of disk drives which might be accommodated by the computer system. 
Typically, these could include a floppy disk drive 3104, a hard disk drive (not 

30 shown externally) and a CD ROM indicated by slot 3106. The number and 
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type of drives vary, typically with different computer configurations. Disk 
drives 3104 and 3106 are in fact optional, and for space considerations, are 
easily omitted from the computer system used in conjunction with the 
production process/apparatus described herein. 

The computer system 3100 also has an optional display 3108 upon 
which information, such as the screens illustrated in, for example, FIGs. 4-10, 
etc. may be displayed. In some situations, a keyboard 31 10 and a mouse 3112 
are provided as input devices through which input may be provided, thus 
allowing input to interface with the central processing unit 3102. Then again, 
for enhanced portability, the keyboard 31 10 is either a limited function 
keyboard or omitted in its entirety. In addition, mouse 3112 optionally is a 
touch pad control device, or a track ball device, or even omitted in its entirety 
as well, and similarly may be used as an input device. In addition, the 
computer system 3100 may also optionally include at least one infrared (or 
radio) transmitter and/or infrared (or radio) receiver for either transmitting 
and/or receiving infrared signals. 

Although computer system 3100 is illustrated having a single 
processor, a single hard disk drive and a single local memory, the system 3100 
is optionally suitably equipped with any multitude or combination of 
processors or storage devices. Computer system 3100 is, in point of fact, able 
to be replaced by, or combined with, any suitable processing system operative 
in accordance with the principles of the present invention, including hand- 
held, laptop/notebook, mini, mainframe and super computers, as well as 
processing system network combinations of the same. 

FIG. 32 illustrates a block diagram of the internal hardware of the 
computer system 3100 of FIG. 31. A bus 3202 serves as the main information 
highway interconnecting the other components of the computer system 3100. 
CPU 3204 is the central processing unit of the system, performing calculations 
and logic operations required to execute a program. Read only memory 
(ROM) 3206 and random access memory (RAM) 3208 constitute the main 
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10 



15 



20 



25 



memory of the computer 3 102. Disk controller 3210 interfaces one or more 
disk drives to the system bus 3202. These disk drives are, for example, floppy 
disk drives such as 3104 or 3106, or CD ROM or DVD (digital video disks) 
drive such as 3212, or internal or external hard drives 3214. As indicated 
previously, these various disk drives and disk controllers are optional devices. 

A display interface 3218 interfaces display 3208 and permits 
information from the bus 3202 to be displayed on the display 3108. Again as 
indicated, display 3108 is also an optional accessory. For example, display 
3108 could be substituted or omitted. Communications with external devices, 
for example, the other components of the system described herein, occur 
utilizing communication port 3216. For example, optical fibers and/or 
electrical cables and/or conductors and/or optical communication (e.g., 
infrared, and the like) and/or wireless communication (e.g., radio frequency 
(RF), and the like) can be used as the transport medium between the external 
devices and communication port 3216. Peripheral interface 3220 interfaces 
the keyboard 31 10 and the mouse 31 12, permitting input data to be 
transmitted to the bus 3202. 

In alternate embodiments, the above-identified CPU 3204, may be 
replaced by or combined with any other suitable processing circuits, including 
programmable logic devices, such as PALs (programmable array logic) and 
PLAs (programmable logic arrays). DSPs (digital signal processors), FPGAs 
(field programmable gate arrays), ASICs (application specific integrated 
circuits), VLSIs (very large scale integrated circuits) or the like. 

One of the implementations of the invention is as sets of instructions 
resident in the random access memory 3208 of one or more computer systems 
3100 configured generally as described above. Until required by the computer 
system, the set of instructions may be stored in another computer readable 
memory, for example, in the hard disk drive 3214, or in a removable memory 
such as an optical disk for eventual use in the CD-ROM 3212 or in a floppy 
disk (e.g., floppy disk 3302 of Fig. 33) for eventual use in a floppy disk drive 
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3104, 3106. Further, the set of instructions (such as those written in the Java 
programming language) can be stored in the memory of another computer and 
transmitted via a transmission medium such as a local area network or a wide 
area network such as the Internet when desired by the user. One skilled in the 
art knows that storage or transmission of the computer program medium 
changes the medium electrically, magnetically, or chemically so that the 
medium carries computer readable information. 

FIG. 34 is an entity relationship diagram (ERD) that describes the 
attributes of entities and the relationships among them, and illustrates the 
basic data abstraction of an embodiment of the system. As known to those 
skilled in the art, an ERD is a conceptual representation of real world objects 
and the relationships between them. It defines information that the systems 
create, maintain, process, and delete, as well as the inherent relationships that 
are supported by the database (i.e., data store). 

At least some embodiments of the present invention can utilize a 
relational database to store and organize all information such as, for example, 
test procedures, standards/regulations, and user entered information. The 
design of an embodiment of the database is provided in the ERD shown in 
FIG. 34. The database is initially populated with security requirements, test 
procedures and related information to facilitate the operation of the system. 
As information is entered by the user and calculated by the system, it is also 
recorded in the database. At least some embodiments of the present invention 
produce output documentation that can be formatted in accordance with, for 
example, DITSCAP and/or NIACAP standard(s). 

The ERD shown in FIG. 34 uses conventional notation. Each entity, as 
shown in FIG. 34, comprises a rectangular box. A one-to-one (1:1) 
relationship indicates that each occurrence of entity A is related to only one of 
entity B and each occurrence of B is related to only one occurrence of A. A 
1:1 rela tionship is indicated by a single line connecting two entities. 



A 




B 
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A one-to-many (1:M) relationship indicates that each occurrence of 
entity A is related to one or more occurrences of entity B, but each occurrence 
of entity B is related to only one occurrence of entity A. The two vertical lines 
shown below indicate that entity A is associated only with entity B. If the two 
vertical lines are not present, entity A can be associated with two or more 
entities (e.g., B, C and/or D). 







41 ► 


B 




A 





A many-to-many (N:M) relationship shows that each occurrence of 
entity A is related to one or more occurrences of entity B, and each occurrence 
of entity B is related to one or more occurrences of entity A. 



A 


< ► 


B 





If there can be occurrences of one entity that are not related to at least 
one occurrence of the other entity, then the relationship is optional and this is 
shown by the use of a dashed line. 



A 




B 





As known to those skilled in the art, a data dictionary, as provided 
below, defines and specifies the data elements in the system. The data 
dictionary shown below can be used either as a stand-alone system or as an 
integral part of the database. Data integrity and accuracy is better ensured in 
the latter case. 

An instance of an entity shown in FIG. 34 will represent one or more 
lines associated with the Table column in the data dictionary provided below 
(i.e., an entity shown in FIG. 34 can have many data items/attributes). These 
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data items, representing an attribute of each respective entity to which it 
belongs, are shown in each line of the data dictionary. The data dictionary 
also provides the DataType (e.g., varchar, bit, decimal, char, text, int, etc.), 
and Length (in characters) of the field. The Precision column is applicable 
5 only to numerical data and represents the maximum number of significant 

digits. The Null column indicates whether the field defaults to a null value. 
FIGs. 34 and the data dictionary can be used to produce, for example, the SQL 
code required to create the data structures in the database. 

The table below provides an exemplary data dictionary that can be 
10 used with the ERD of FIG. 34. 
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Database Table 

SQL SERVER 
AppUser 



Column 



DataType Length Precision Null 



userlD 


numeric 


9 


18 


NO 


userName 


varchar 


25 


0 


NO 


userPassword 


varchar 


30 


0 


NO 


f irstName 


varchar 


20 


0 


YES 


lastName 


varchar 


20 


0 


YES 


phoneNumber 


varchar 


30 


0 


YES 


pwdLast Changed 


datetime 


8 


23 


YES 


userEmail 


varchar 


50 


0 


YES 


RoleLogin 










rolelD 


varchar 


10 


0 


NO 


dbRoleName 


varchar 


12 


0 


NO 


dbRolePassword 


varchar 


30 


0 


NO 


db PwdLast Changed 


datetime 


8 


23 


YES 


UserRole 










userlD 


numeric 


9 


18 


NO 


rolelD 


varchar 


10 


0 


NO 


status 


char 


1 


0 


YES 












acronym 


varchar 


50 


0 


NO 


description 


text 


16 


0 


YES 


department 


int 


4 


10 


NO 


service 


int 


4 


10 


NO 


applPubFormat 


varchar 


50 


0 


YES 


WCA.AppdxTTLSrc 










document 


varchar 


50 


0 


YES 


title 


varchar 


255 


0 


YES 
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Database Table Column DataType Length Precision Null 





letter 


varchar 


50 


0 


YES 




applPubFormat 


varchar 


50 


0 


NO 




appendixType 


varchar 


50 


0 


NO 




WCA AoDlEventSrc 












Event ID 


varchar 


50 


0 


NO 




StageName 


varchar 


50 


0 


YES 




Category- 


varchar 


50 


0 


YES 




Severity 


char 


30 


0 


YES 




PubFormat 


varchar 


10 


0 


YES 




WCA_ApplicationID 












applID 


varchar 


3 


0 


NO 




applName 


varchar 


50 


0 


NO 




WCA AnriitT no 










i r j 


id 


int 


4 


10 


NO 


m 

fi ! 


PID 


int 


4 


10 


YES 


I1J 


ProjectName 


varchar 


50 


0 


YES 


Hi 


TableName 


varchar 


25 


0 


YES 


Ci) 


Key Values 


varchar 


250 


0 


YES 




StageName 


varchar 


50 


0 


YES 




ProcessStep 


varchar 


50 


0 


YES 


sis 


PagelD 


varchar 


50 


0 


YES 


5 


UserlD 


numeric 


9 


1 8 


YES 


hi 


IPAddress 


varchar 


16 


0 


NO 




Ac t ionDe s c 


text 


± b 


u 


YES 




ActionStatus 


char 


20 


0 


YES 




ActionTime 


datetime 


8 


23 


YES 




EventType 


varchar 


50 


0 


YES 




ErrorMessage 


text 


16 


0 


YES 




UserName 


varchar 


25 


0 


YES 




WCA_CIassWeight 












ID 


int 


4 


10 


NO 




characteristic 


varchar 


255 


0 


YES 




alternative 


varchar 


255 


0 


YES 




weight 


float 


8 


53 


YES 




applPubFormat 


varchar 


50 


0 


NO' 
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Database Table 

WCA DefinitionSrc 



Column DataType Length Precision 



Null 



term 


varchar 


50 


0 


NO 


definition 


text 


16 


0 


YES 


department 


int 


4 


10 


NO 


service 


int 


4 


10 


NO 


appl PubFormat 


varchar 


50 


0 


YES 


WCA_DefSecRegSrc 










department 


int 


4 


10 


NO 


service 


int 


4 


10 


NO 




int 




1 0 


NO 


WCA_DeptServCode 










department 


int 


4 


10 


NO 


s e r v ice 


J.I1U 




1 0 


NO 


UcLJClI. UlllCilUlNclllIC 


ira "V- <^"» V"i "V^ 

VclX L.IldX 


5 0 


o 


NO 


ZD ^ J- V X L ^l^c CilLl^ 


V CI J- V*11CI-L. 


50 


o 


NO 


WCA_DocEventSrc 










appl PubFormat 


varchar 


50 


0 


NO 


documentEvent 


varchar 


50 


0 


NO 


WCA_DocParaTTLSrc 










title 


varchar 


60 


0 


NO 


paragraph 


varchar 


50 


0 


NO 


document 


varchar 


50 


0 


NO 


applPubFormat 


varchar 


50 


0 


NO 


paragraphLeve 1 


int 


4 


10 


NO 


paragraphType 


varchar 


50 


0 


YES 


WCA_DocTmplSrc 










instance 


int 


4 


10 


NO 


text 


text 


16 


0 


YES 


notes 


varchar 


50 


0 


YES 


document 


varchar . 


50 


0 


NO 


paragraph 


varchar 


255 


0 


NO 


app 1 PubFormat 


varchar 


50 


0 


NO 


WCA_HelpExampleSrc 










ID 


int 


4 


10 


NO 


page 


varchar 


50 


0 


YES 


appl PubFormat 


varchar 


50 


0 


NO 


type 


varchar 


50 


0 


YES 
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Database Table 


Column 


DataType 


Length 


Precision 


title 


varchar 


50 


0 


YES 


helptext 


text 


16 


0 


YES 


height 


int 


4 


10 


NO 


width 


int 


4 


10 


NO 


seeAlso 


int 


4 


10 


YES 


page ID 


varchar 


50 


0 


NO 


heading 


varchar 


50 


0 


NO 


stgID 


numeric 


9 


18 


YES 


WCA_HwFamilyLookup 










hwFamily 


varchar 


50 


0 


NO ■ 


rank 


int 


4 


10 


NO 


type 


char 


10 


0 


NO 


hwID 


numeric 


9 


18 


NO 


WCAJnfoCategory 










infoCatID 


int 


4 


10 


NO 


inf oCatName 


varchar 


60 


0 


YES 


inf oCatValue 


varchar 


5 


0 


YES 


rank 


int 


4 


10 


YES 


weight 


float 


8 


53 


NO 


WCAJLevelDetermin 










ID 


int 


4 


10 


NO 


weightedTotalMin 


float 


8 


53 


YES 


weightedTotalMax 


float 


8 


53 


YES 


class 


int 


4 


10 


YES 


description 


varchar 


255 


0 


YES 


applPubFormat 


varchar 


50 


0 


NO 


WCA__LookupMgr 










webCaLookups ID 


numeric 


9 


18 


NO 


tableName 


varchar 


50 


0 


NO 


columnName 


varchar 


50 


0 


NO 


IkupDescription 


varchar 


50 


0 


YES 


wlSize 


numeric 


9 


18 


YES 


W C A_MarkerLookup 










marker 


varchar 


50 


0 


NO 


sqlStatement 


varchar 


1000 


0 


NO 


retrieval Type 


varchar 


50 


0 


NO 


errorMessageText 


varchar 


255 


0 


YES 



Null 
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Database Table Column DataType Length Precision Null 

WCA_MinSeCkListSrc 





sectionName 


varchar 


255 


0 


NO 




question 


varchar 


50 


0 


NO 




testText 


text 


16 


0 


YES 




questionSort 


numeric 


9 


18 


YES 




applPubFormat 


varchar 


50 


0 


YES 




validQuestion 


char 


1 


0 


YES 




WCA_MLSecCIass 












ID 


int 


4 


10 


YES 




maxDateClass 


varchar 


255 


0 


YES 




minUserClear 


varchar 


255 


0 


YES 




easel 


varchar 


255 


0 


YES 




case2 


varchar 


255 


0 


YES 


a- 
i : • 

f =5 


case3 


varchar 


255 


0 


YES 


5 %k 


WCA_Organization 










f|j 

EG 

Cm 


orgID 


decimal 


9 


18 


NO 


orgName 


varchar 


50 


0 


NO 




orgDescription 


varchar 


255 


0 


NO 


o 


WCA_OrgUser 












orgID 


decimal 


9 


18 


NO 


?: J 


userlD 


int 


4 


10 


NO 


r~ i 


WCA_OsFamilyLookup 












osFamily 


varchar 


50 


0 


NO 




rank 


int 


4 


10 


NO 




type 


char 


10 


0 


NO 




osID 


numeric 


9 


18 


NO 




WCA_OSSource 












osRef erence 


varchar 


50 


0 


NO 




osFamily 


varchar 


20 


0 


YES 




osMf r 


varchar 


50 


0 


YES 




osName 


varchar 


50 


0 


YES 




osVersion 


varchar 


50 


0 


YES 




osPatchLevel 


varchar 


50 


0 


YES 
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Database Table Column DataType Length Precision Null 

WCA_PageAttributes 





pagelD 


varchar 


50 


0 


NO 




stgID 


numeric 


9 


18 


NO 




appPageTitle 


varchar 


50 


0 


NO 




appPageHeading 


varchar 


50 


0 


YES 




processStep 


varchar 


50 


0 


NO 




WCA_ProjAcBoundary 












PID 


numeric 


9 


18 


■ NO 




pabName 


varchar 


50 


0 


NO 




pabDescription 


text 


16 


0 


NO 




adID 


numeric 


9 


18 


NO 




WCA_ProjAcronym 










* pi 


ID 


int 


4 


10 


NO 


cii 


PID 


numeric 


9 


18 


NO 


ru 

SIS J 


acronym 


varchar 


50 


0 


YES 


iy 
ffi 


description 


text 


16 


0 


YES 


m 


WCA_ProjAppdxFiIe 










£ 


ID 


numeric 


9 


18 


NO 


n 


PID 


numeric 


9 


18 


NO 


spu 


letter 


varchar 


50 


0 


NO 




title 


varchar 


255 


0 


YES 


O 


shortTitle 


varchar 


255 


0 


YES 




author 


varchar 


255 


0 


YES 




date 


varchar 


255 


0 


YES 




version 


varchar 


50 


0 


YES 




url 


varchar 


255 


0 


YES 




appendixCFlag 


char 


10 


0 


YES 




f ilelD 


numeric 


9 


18 


NO 




WCA„ProjAppdxTTL 












PID 


numeric 


9 


18 


NO 




document 


varchar 


50 


0 


NO 




letter 


varchar 


50 


0 


YES 




title 


varchar 


255 


0 


YES 




appendixType 


varchar 


50 


0 


NO 




WCA_ProjChar 












charName 


varchar 


50 


0 


NO 
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Database Table 
WCA_ProjCharDtI 

PID 

charName 

stringValue 

weight 

WCA_PrpjCkListRes 

PID 

sectionName 

question 

result 

WCA_ProjConTestRes 

platld 

PID 

catl 

cat2 

cat3 

aggregatedResult 
statementOf Issue 
hwPlatform 
threat 

impactStatement 
testTitle 

associatedRequiremen 
templateld 

testType 

projOSType 

testCategoryld 

certAnalysisLevel 

testRequirements 

riskElemRef 

total Population 

testPopulation 

totalFailed 



Column DataType Length Precision Null 



numeric 


9 


18 


NO 


varchar 


50 


0 


NO 


varchar 


50 


0 


NO 


float 


8 


53 


YES 



numeric 9 18 NO 

varchar 255 0 NO 

varchar 50 0 NO 

varchar 50 0 YES 

numeric 9 18 NO 

numeric 9 18 NO 

varchar 50 0 YES 

varchar 50 0 YES 

varchar 50 0 YES 

varchar 50 0 YES 

text 16 0 YES 

varchar 50 0 YES 

varchar 50 0 YES 

text 16 0 YES 

varchar 100 0 YES 

text 16 0 YES 

numeric 9 18 NO 

varchar 1 0 YES 

varchar 50 0 YES 

numeric 9 18 NO 

numeric 9 18 YES 

text 16 0 YES 

numeric 9 18 YES 

numeric 9 18 YES 

numeric 9 18 YES 

numeric 9 18 YES 
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Database Table 
WCA_ProjDataFlow 

dataFlowID 

dataFlowDesc 

PID 

shortName 

WCA_ProjDefAccess 

PID 
stglD 

stageAccess 

WCA_ProjDefinitions 

ID 

PID 

term 

definition 

WCA_ProjDocPara 

PID 

paragraph 
text 

document 
title 

paragraphLevel 
paragraphType 

WCA_ProjDocParaTTL 

PID 

document 

paragraph 

title 

WCA_ProjDocStatus 

PID 

documentEvent 




Column DataTyp Length 



numeric 9 18 

text 16 0 

numeric 9 18 

varchar 50 0 

numeric 9 18 

numeric 9 18 

char 1 0 

int 4 10 

numeric 9 18 

varchar 255 0 

text 16 0 

numeric 9 18 

varchar 255 0 

text 16 0 

varchar 50 0 

varchar 255 0 

decimal 9 18 

varchar 50 0 

numeric 9 18 

varchar 50 0 

varchar 255 0 

varchar 255 0 

numeric 9 18 

varchar 50 0 



PATENT 

Precision Null 

NO 

NO 

NO 
NO 

NO 
NO 
NO 

NO 

NO 
YES 
YES 

NO 

NO 
YES 

NO 
YES 
YES 
YES 

NO 
YES 
YES 
YES 

NO 
NO 
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Database Table 
WCA.ProjDocTTL 

PID 

letter 
title 

documentType 
classLevel 
document 
ID 

WCA_Project 

PID 

name 

acronym 

proj Description 
version 
department 
service 

subscript ionKey 

accreditationType 

certLevel 

orgID 

proj Status 

pub 1 i s h i ng Forma t 

infoCatID 

answers 

userDef inedCertLvl 

expirationDate 

totaival 



Column 
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DataTyp Length Precision Null 



numeric 


9 


18 


NO 


varchar 


50 


0 


NO 


varchar 


255 


0 


NO 


varchar 


50 


0 


NO 


varchar 


50 


0 


NO 


varchar 


50 


0 


NO 


numeric 


9 


18 


YES 



numeric 9 18 NO 

varchar 50 0 NO 

varchar 50 0 YES 

text 16 0 NO 

varchar 50 0 YES 

int 4 10 NO 

int 4 10 NO 

varchar 50 0 NO 

varchar 50 0 YES 

numeric 9 18 YES 

decimal 9 18 NO 

varchar 10 0 NO 

varchar 50 0 NO 

int 4 10 YES 

varchar 7 0 YES 

int 4 10 YES 

datetime 8 23 NO 

int 4 10 YES 
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Database Table 
WCA_ProjEquipInven 



Column 
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DataType Length Precision Null 



PID 


numeric 


9 


18 


NO 


equipID 


numeric 


9 


18 


NO 


platID 


numeric 


9 


18 


NO 


equipMf r 


varchar 


50 


0 


YES 


equipModel 


varchar 


50 


0 


YES 


equipSN 


varchar 


50 


0 


YES 


equipDescription 


text 


16 


0 


YES 


equipHwFamily 


varchar 


20 


0 


YES 


equipCPUType 


varchar 


50 


0 


YES 


equipCPUQty 


varchar 


50 


0 


YES 


equipCPUSpeed 


varchar 


50 


0 


YES 


equipRAM 


varchar 


50 


0 


YES 


equipDiskSize 


varchar 


50 


0 


YES 


equipDiskDesc 


text 


16 


0 


YES 


equipOtherStorage 


varchar 


50 


0 


YES 


equipDisplay 


varchar 


50 


0 


YES 


equipOtherHw 


text 


16 


0 


YES 


equipOsRef erence 


varchar 


50 


0 


YES 


equipOsFamily 


varchar 


20 


0 


YES 


equipOsMf r 


varchar 


50 


0 


YES 


equipOSName 


varchar 


50 


0 


YES 


equipOSVersion 


varchar 


50 


0 


YES 


equipOSDe script ion 


text 


16 


0 


YES 


equipIPAddress 


varchar 


255 


0 


NO 


equipMAC 


varchar 


20 


0 


YES 


equipHostName 


varchar 


50 


0 


YES 


equipTestFlag 


char 


1 


0 


YES 


equipLocation 


varchar 


50 


0 


YES 


equipvisualld 


varchar 


50 


0 


YES 


equipOsPatchLevel 


varchar 


50 


0 


YES 


,_ProjEquipSW 










PID 


numeric 


9 


18 


NO 


equipID 


numeric 


9 


18 


NO 


sof tID 


numeric 


9 


18 


NO 
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Database Table 
WCA_ProjEventStat 

PID 

appl Event 
status 

WCA_ProjEventStatus 

PID 

Event ID 

FirstOccurred 

LastModif ied 

EventStatus 

UserlD 

UserName 

ProjectName 

PublishingTitle 

WCA_ProjFile 

ID 

PID 

size 

name 

type 

creationDate 

WCA.ProjFileData 

ID 
PID 

offset 
data 

WCA_ProjMilestone 

PID 

milestonelD 
title 

milestoneDate 

milestone 

newDate 




Column DataType Length 



numeric 9 18 

varchar 25 0 

char 2 0 

numeric 9 18 

varchar 50 0 

datetime 8 23 

datetime 8 23 

varchar 15 0 

numeric 9 18 

varchar 25 0 

varchar 50 0 

varchar 50 0 

int 4 10 

numeric 9 18 

int 4 10 

varchar 255 0 

varchar 255 0 

decimal 9 18 

int 4 10 

numeric 9 18 

int 4 10 

varchar 8000 0 

numeric 9 18 

numeric 9 18 

varchar 50 0 

varchar 50 0 

text 16 0 

datetime 8 23 



PATENT 

Precision Null 

NO 
NO 
YES 

NO 

NO 

NO 
YES 

NO 

NO 

NO 

NO 
YES 

NO 
NO 
NO 
NO 
NO 
NO 

NO 
NO 
NO 
YES 

NO 

NO 

NO 
YES 
YES 
YES 
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CO 



Database Table 


Column 


DataTyp 


Length 


Prech 


WCA ProiParaFia 










ID 


int 


4 


10 




f ilelD 


numeric 


9 


18 


NO 


PID 


numeric 


9 


18 


NO 


f igureName 


varchar 


255 


0 


NO 


f igureNumoer 


int 




x u 


VT7C 


f igureType 


varchar 


50 


0 


YES 


document 


varchar 


50 


0 


YES 


f igureTitle 


varchar 


255 


0 


YES 


paragraph 


varchar 


50 


0 


YES 


vv v^/\_r rojr <tr<tgr<tpiid 










PID 


numeric 


9 


18 


NO 


document 


varchar 


50 


0 


NO 


letter 


varchar 


50 


0 


NO 


number 


varchar 


50 


0 


NO 


indent 


numeric 


9 


18 


NO 


title 


varchar 


50 


0 


NO 


text 


text 


16 


o 


YES 


WCA_ProjPersonnel 










projPersID 


numeric 


9 


18 


NO 


roleName 


varchar 


50 


0 


NO 


title 


varchar 


50 


0 


NO 


f name 


varchar 


50 


0 


NO 


mi 


varchar 


50 


0 


YES 


lname 


varchar 


50 


0 


NO 


office 


varchar 


50 


0 


NO 


ppOrga'nization 


varchar 


50 


0 


NO 


addressl 


varchar 


50 


0 


YES 


address2 


varchar 


50 


0 


YES 


city 


varchar 


50 


0 


NO 


state 


varchar 


50 


0 


NO 


zip 


varchar 


50 


0 


NO 


phone 


varchar 


50 


0 


NO 


of f iceDesignation 


varchar 


50 


0 


YES 


PID 


numeric 


9 


18 


NO 


fax 


varchar 


50 


0 


YES 


email 


varchar 


50 


0 


YES 



Null 
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Database Table Column DataTyp Length Precision Null 

WCA_ProjPIatCat 



PID 


numeric 


9 


18 


NO 


platID 


numeric 


9 


18 


NO 


platCategory 


varchar 


50 


0 


NO 


platDescription 


text 


16 


0 


YES 


platQtyEstimated 


numeric 


9 


18 


YES 


platQtyActual 


numeric 


9 


18 


YES 


platTestStrategy 


char 


5 


0 


NO 


platHwFamily 


varchar 


20 


0 


NO 


platMfr 


varchar 


50 


0 


YES 


platModel 


varchar 


50 


0 


YES 


platCpuType 


varchar 


50 


0 


YES 


platCpuQty 


varchar 


50 


0 


YES 


platCpuSpeeed 


varchar 


50 


0 


YES 


platRam 


varchar 


50 


0 


YES 


t\~\ a t~ "i at Qi to 


V Ct-L UIlul 


50 


o 


YES 


platDiskDesc 


text 


16 


0 


YES 


platother Storage 


text 


16 


0 


YES 


platDisplay 


varchar 


50 


0 


YES 


platOtherHw 


text 


16 


0 


YES 


platOsRef erence 


varchar 


50 


0 


YES 


platOsFamily 


varchar 


20 


0 


YES 


platOsMf r 


varchar 


50 


0 


YES 
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Database Table 

platOsName 

platOsVersion 

platOsPatchLevel 

platOsDescription 

platlpAddress 

platSn 

platLocation 
platvisualld 

WCA_ProjPlatSW 

PID 

platID 
softID 

WCA_ProjPublishedDoc 

PID 

document 

title 

filename 

contentType 

creationDate 

content 

WCA_ProjReference 

projRef ID 

PID 
title 

shortTitle 

author 

refDate 

version 

url 

refType 
regID 
appendix 
ref Instance 
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Column 

varchar 

varchar 

varchar 

text 

varchar 

varchar 

varchar 

varchar 



DataType Length Precision 



Null 



50 
50 
50 
16 
255 
50 
50 
50 



YES 
YES 
YES 
YES 
YES 
YES 
YES 
YES 



numeric 9 18 NO 

numeric 9 18 NO 

numeric 9 18 NO 

numeric 9 18 YES 

varchar 50 0 YES 

varchar 255 0 YES 

varchar 255 0 YES 

varchar 255 0 YES 

datetime 8 23 YES 

image 16 0 NO 

numeric 9 18 NO 

numeric 9 18 NO 

varchar 255 0 NO 

varchar 255 0 YES 

varchar 50 0 YES 

varchar 50 0 YES 

varchar 50 0 YES 

varchar 255 0 YES 

char 1 0 YES 

numeric 9 18 NO 

varchar 50 0 YES 

numeric 9 18 YES 
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Database Table 
WCA_ProjRiskElem 



Column 



DataTyp Length Precision Null 



PID 


numeric 


9 


18 


NO 


testFailure 


varchar 


100 


0 


NO 


associatedRqmt 


text 


16 


0 


YES 


stat ementOf Issue 


text 


16 


0 


YES 


ihipact Statement 


text 


16 


0 


YES 


saf eGuard 


text 


16 


0 


YES 


riskAssessment 


text 


16 


0 


YES 


calcRiskLevel 


varchar 


50 


0 


YES 


userRiskLevel 


varchar 


50 


0 


YES 


threatCorrelation 


varchar 


50 


0 


YES 


riskElemRef 


numeric 


9 


18 


YES 


totalPopulation 


numeric 


9 


18 


YES 


test Population 


numeric 


9 


18 


YES 


totalFailed 


numeric 


9 


18 


YES 


platID 


numeric 


9 


18 


NO 


testCategorylD 


numeric 


9 


18 


NO 


analysisComp 


char 


3 


0 


YES 


,_ProjRqmt 

projRqmtID 


numeric 


9 


18 


NO 


PID 


numeric 


9 


18 


NO 


reglD 


numeric 


9 


18 


YES 


sourceDoc 


varchar 


50 


0 


NO 


paragraph 


varchar 


255 


0 


NO 


title 


varchar 


255 


0 


NO 


statedRequirement 


varchar 


4000 


0 


NO 


result 


varchar 


50 


0 


YES 


certReportRef 


varchar 


255 


0 


YES 


catl 


varchar 


50 


0 


YES 


cat2 


varchar 


50 


0 


YES 


cat3 


varchar 


50 


0 


YES 


already Pulled 


char 


1 


0 


YES 


templatelD 


numeric 


9 


18 


YES 


regType 


char 


1 


0 


YES 


allowEdit 


numeric 


9 


18 


NO 


testCategoryld 


numeric 


9 


18 


YES 


interviewFlag 


char 


1 


0 


YES 


observationFlag 


char 


1 


0 


YES 


document Flag 


char 


1 


0 


YES 


testFlag 


char 


1 


0 


YES 


srtmResult 


varchar 


50 


0 


YES 
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Database Table 
WCA_ProjSSAAStatus 

PID 

SSAAEvent 

WCA_ProjSWInven 

PID 

SoftID 
sof tName 
softMf r 
sof tVersion 
sof tPatchLevel 
sof tDescription 
SWRef erence 
SWFamily 

WCA_ProjSysInterf 

interf acelD 
inter f aceName 
interf aceDesc 
PID 

WCA_ProjSysLvlRisk 

PID 

riskDescription 
calcRiskLevel 
userDef RiskLevel 

WCA_ProjSystemUser 

sysUserlD 
PID 

category 

minClearance 

aisCertLevel 

foreignNational 

psuDescription 

rank 

WCA_ProjSysThreat 

PID 

threat Element 
calcValue 
userDef inedValue 
threat Category 



Column DataType Length 



numeric 9 18 

varchar 50 0 

numeric 9 18 

numeric 9 18 

varchar 50 0 

varchar 50 0 

varchar 50 0 

varchar 255 0 

text 16 0 

varchar 50 0 

varchar 20 0 

numeric 9 18 

varchar 50 0 

text 16 0 

numeric 9 18 

numeric 9 18 

text 16 0 

varchar 50 0 

varchar 50 0 

numeric 9 18 

numeric 9 18 

varchar 50 0 

varchar 50 0 

varchar 50 0 

varchar 50 0 

text 16 0 

int 4 10 

numeric 9 18 

varchar 50 0 

varchar 50 0 

varchar 50 0 

varchar 50 0 



PATENT 

Precision Null 

NO 
NO 

NO 

NO 

NO 

NO 

NO 
YES 
YES 
YES 
YES 

NO 
YES 
YES 

NO 

NO 
YES 
YES 
YES 

NO 
NO 
NO 
NO 
NO 
NO 
YES 
NO 

NO 

NO 
YES 

YES 
YES 
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Database Table Column DataType 

WCA_ProjTestProc 



PID 


numeric 


catl 


varchar 


cat2 


varchar 


cat3 


varchar 


testText 


text 


expectedResult 


text 


result 


varchar 


notes 


text 


tester 


varchar 


datePer formed 


datetime 


hwPlatf orm 


varchar 


t e s t Numbe rType 


varchar 


threat 


varchar 


impact Statement 


text 


testTitle 


varchar 


interviewFlag 


char 


observationFlag 


char 


testFlag 


char 


documentFlag 


char 


platlD 


numeric 


associatedRqmt 


text 


templatelD 


numeric 


testType 


char 


projOsType 


varchar 


testCategorylD 


numeric 


certAnalysisLevel 


numeric 


testRequirements 


text 


testobjective 


varchar 


testMfr 


varchar 


testModel 


varchar 


testSN 


varchar 


testLocation 


varchar 


testVisuallD 


varchar 


equipID 


numeric 




PATENT 



Length Precision Null 



9 


18 


NO 


50 


0 


YES 


50 


0 


YES 


50 


0 


YES 


16 


0 


YES 


16 


0 


YES 


50 


0 


YES 


16 


0 


YES 


50 


0 


YES 


8 


23 


YES 


50 


0 


YES 


50 


0 


YES 


50 


0 


YES 


16 


0 


YES 


100 


0 


YES 


1 


0 


YES 


1 


0 


YES 


1 


0 


YES 


1 


0 


YES 


9 


18 


NO 


16 


0 


YES 


9 


18 


NO 


1 


0 


NO 


50 


0 


YES 


9 


18 


NO 


9 


18 


YES 


16 


0 


YES 


1000 


0 


YES 


50 


0 


YES 


50 


0 


YES 


50 


0 


YES 


50 


0 


YES 


50 


0 


YES 


9 


18 


NO 
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Database Table 
WCA_ProjThreatEnv 

PID 

location 

pteNetwork 

wireless 

dialup 

pds 

adminTraining 

maintTraining 

userTraining 

installationFac 

flood 

fire 

lightning 

tornado 

volcano 

earthquake 

hurricane 

customHardware 

customSof tware 

projThreatEnvCalc 

projThreatEnvUser 

WCA.ProjUser 

userlD 
PID 

WCA_ProjUserAccess 

PID 

userlD 
stgID 

stageAccess 

WCA.PublishFmt 

publishingCode 
pfDescription 

WCA_RiskDetermin 

pro j ThreatElement 
testThreatElement 
elementRiskLevel 
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Column 



DataTyp Length Precision Null 



numeric 

varchar 

varchar 

char 

char 

char 

varchar 

varchar 

varchar 

varchar 

char 

char 

char 

char 

char 

char 

char 

char 

char 

varchar 

varchar 



9 
50 
50 
1 
1 
1 
50 
50 
50 
50 
1 
1 
1 
1 
1 
1 
1 
1 
1 
50 
50 



18 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 



NO 
YES 
YES 
YES 
YES 
YES 
YES 
YES 
YES 
YES 
YES 
YES 
YES 
YES 
YES 
YES 
YES 
YES 
YES 
YES 
YES 



numeric 9 18 NO 

numeric 9 18 NO 

numeric 9 18 NO 

numeric 9 18 NO 

numeric 9 18 NO 

char 1 0 NO 

char 2 0 NO 

varchar 50 0 NO 



char 1 0 NO 

char 1 0 NO 

char 2 0 NO 



32-121 US1 



PATENT 



Database Table 


Column 


DataTyp 


Length 


Prech 


WCA_RiskLvlCode 










e 1 ement Ri skLe ve 1 


char 


2 


0 


NO 


riskLevelDesc 


varchar 


50 


0 


NO 












regID 


int 


4 


10 


NO 


shortTitle 


varchar 


255 


0 


YES 


title 


varchar 


255 


0 


NO 


sourceDoc 


varchar 


50 


0 


YES 


service 


int 


4 


10 


YES 


qualifier 


varchar 


50 


0 


YES 


author 


varchar 


50 


0 


YES 


regDate 


varchar 


50 


0 


YES 


version 


varchar 


50 


0 


YES 


url 


varchar 


255 


0 


YES 


regType 


char 


1 


0 


YES 


department 


int 


4 


10 


NO 


appl PubFormat 


varchar 


50 


0 


NO 


WCA_SecReqCritQ 










secRegCritQID 


int 


4 


10 


NO 


code 


varchar 


255 


0 


NO 


message 


varchar 


255 


0 


NO 


w i^A_»3ecKqmiorc 










regID 


int 


4 


10 


NO 


sourceDoc 


varchar 


50 


0 


NO 


paragraph 


varchar 


255 


0 


NO 


title 


varchar 


255 


0 


NO 


statedRequirement 


varchar 


4000 


0 


NO 


secClass 


varchar 


255 


0 


YES 


criteria 


varchar 


50 


0 


YES 


catl 


varchar 


50 


0 


YES 


cat2 


varchar 


50 


0 


YES 


cat3 


varchar 


50 


0 


YES 


allowEdit 


numeric 


9 


18 


NO 


testCategorylD 


numeric 


9 


18 


YES 



Null 
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Database Table 
WCA_SSAAEventSrc 

applPubFormat 
SSAAEvent 

WCA_Stages 

GtgID 
stageName 

WCA_StaticLkpDtl 

lookupName 

attributeName 

rank 

WCA_StaticLookup 

lookupName 

WCA_SwFamiIyLookup 

swFamily 
rank 
type 
swID 

WCA_SWSource 

swRef erence 

swFamily 

swMf r 

swName 

swVersion 

swPatchLevel 

WCA_SysUserCategory 

sysUserCategorylD 

category 

categoryType 

WCA_TestCategory 

testCategorylD 

WCA_TestProcSrc 

templatelD 
catl 
cat2 
cat3 




Column DataTyp Length 



varchar 50 0 

varchar 50 0 

numeric 9 18 

varchar 50 0 

varchar 50 0 

varchar 50 0 

int 4 10 

varchar 50 0 

varchar 50 0 

int 4 10 

char 10 0 

numeric 9 18 

varchar 50 0 

varchar 20 0 

varchar 50 0 

varchar 50 0 

varchar 50 0 

varchar 50 0 

int 4 10 

varchar 50 0 

char 1 0 

numeric 9 18 

numeric 9 18 

varchar 50 0 

varchar 50 0 

varchar 50 0 



PATENT 

Precision Null 

NO 
NO 

NO 
NO 

NO 
NO 
YES 

NO 

NO 
NO 
NO 
NO 

NO 
YES 
YES 
YES 
YES 
YES 

NO 
NO 
YES 

NO 

NO 
YES 
YES 
YES 
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osType 


varchar 


50 


0 


YES 




testText 


text 


16 


0 


YES 




expectedResult 


text 


16 


0 


YES 




test Instance 


varchar 


50 


0 


YES 




testTitie 


varchar 


100 


0 


YES 




ce rt Ana lys i sLeve 1 


nume r i c 


9 


18 


YES 




threat 


varchar 


50 


0 


YES 




impact Statement 


text 


16 


0 


YES 




uiLcX viewr lay 


char 




u 


vpc 




observationFlag 


char 


1 


0 


YES 




testFlag 


char 


1 


0 


YES 




documentFlag 


char 


1 


0 


YES 




testCategorylD 


numeric 


9 


18 


NO 


tfi 














PID 


numeric 


9 


18 


NO 


fll 

ru 


baselineMod 


char 


1 


0 


NO 




platCatMod 


char 


1 


0 


NO 




equip InvenMod 


char 


1 


0 


NO 


K) 

s 


conTestResultMod 


char 


1 


0 


NO 


£3 


WCA_ThreatCategory 










! i 


categoryRank 


int 


4 


10 


NO 


fll 


rank 


int 


4 


10 


NO 


r". 


threatCategory 


varchar 


50 


0 


NO 




threatElement 


varchar 


50 


0 


NO 




102< 
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The many features and advantages of the invention are apparent from 
the detailed specification, and thus, it is intended by the appended claims to 
cover all such features and advantages of the invention which fall within the 
true spirit and scope of the invention. Further, since numerous modifications 
and variations will readily occur to those skilled in the art, it is not desired to 
limit the invention to the exact construction and operation illustrated and 
described, and accordingly, all suitable modifications and equivalents may be 
resorted to, falling within the scope of the invention. While the foregoing 
invention has been described in detail by way of illustration and example of 
preferred embodiments, numerous modifications, substitutions, and alterations 
are possible without departing from the scope of the invention defined in the 
following claims. 



